diff --git a/api/package.json b/api/package.json
index 51c865de..64785730 100644
--- a/api/package.json
+++ b/api/package.json
@@ -36,7 +36,7 @@
     "@sentry/node": "^8.35.0",
     "@sentry/profiling-node": "^8.35.0",
     "cookie-parser": "^1.4.7",
-    "express": "^4.21.1",
+    "express": "^4.21.2",
     "express-async-error-wrapper": "^1.0.4",
     "express-physical": "^2.0.0",
     "express-prom-bundle": "^6.4.1",
@@ -65,4 +65,4 @@
     "ts-node": "^10.9.1",
     "tsconfig-paths": "^4.1.2"
   }
-}
+}
\ No newline at end of file
diff --git a/core/package.json b/core/package.json
index e2c35c14..07be77e3 100644
--- a/core/package.json
+++ b/core/package.json
@@ -37,7 +37,7 @@
     "@sentry/node": "^8.35.0",
     "@sentry/profiling-node": "^8.35.0",
     "emailjs": "^4.0.3",
-    "express": "^4.21.1",
+    "express": "^4.21.2",
     "global-agent": "^3.0.0",
     "handlebars": "^4.7.7",
     "jsonwebtoken": "^9.0.0",
@@ -60,4 +60,4 @@
     "supertest": "^6.3.3",
     "ts-node": "^10.9.1"
   }
-}
+}
\ No newline at end of file
diff --git a/package-lock.json b/package-lock.json
index 79a922fa..9ca13faf 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -44,7 +44,7 @@
         "@sentry/node": "^8.35.0",
         "@sentry/profiling-node": "^8.35.0",
         "cookie-parser": "^1.4.7",
-        "express": "^4.21.1",
+        "express": "^4.21.2",
         "express-async-error-wrapper": "^1.0.4",
         "express-physical": "^2.0.0",
         "express-prom-bundle": "^6.4.1",
@@ -258,7 +258,7 @@
         "@sentry/node": "^8.35.0",
         "@sentry/profiling-node": "^8.35.0",
         "emailjs": "^4.0.3",
-        "express": "^4.21.1",
+        "express": "^4.21.2",
         "global-agent": "^3.0.0",
         "handlebars": "^4.7.7",
         "jsonwebtoken": "^9.0.0",
@@ -13924,8 +13924,9 @@
       "license": "Apache-2.0"
     },
     "node_modules/express": {
-      "version": "4.21.1",
-      "license": "MIT",
+      "version": "4.21.2",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.21.2.tgz",
+      "integrity": "sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==",
       "dependencies": {
         "accepts": "~1.3.8",
         "array-flatten": "1.1.1",
@@ -13946,7 +13947,7 @@
         "methods": "~1.1.2",
         "on-finished": "2.4.1",
         "parseurl": "~1.3.3",
-        "path-to-regexp": "0.1.10",
+        "path-to-regexp": "0.1.12",
         "proxy-addr": "~2.0.7",
         "qs": "6.13.0",
         "range-parser": "~1.2.1",
@@ -13961,6 +13962,10 @@
       },
       "engines": {
         "node": ">= 0.10.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/express-async-error-wrapper": {
@@ -22585,8 +22590,9 @@
       "license": "ISC"
     },
     "node_modules/path-to-regexp": {
-      "version": "0.1.10",
-      "license": "MIT"
+      "version": "0.1.12",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.12.tgz",
+      "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ=="
     },
     "node_modules/path-type": {
       "version": "4.0.0",